What is GHSA-692x-89xv-64jx?

GHSA-692x-89xv-64jx is a security advisory published by GitHub Security Advisories with High severity. Pagekit File Upload vulnerability

Which CVE IDs does GHSA-692x-89xv-64jx cover?

GHSA-692x-89xv-64jx covers the following CVE IDs: CVE-2019-19013. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-692x-89xv-64jx?

GHSA-692x-89xv-64jx has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-692x-89xv-64jx?

GHSA-692x-89xv-64jx affects 1 product, including: composer/pagekit/pagekit:\u003c= 1.0.17.

GHSA-692x-89xv-64jxHighCVSS 8.8

Pagekit File Upload vulnerability

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

September 26, 2023

🔗 CVE IDs covered (1)

CVE-2019-19013 →

📋 Description

A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request.

🎯 Affected products1

composer/pagekit/pagekit:<= 1.0.17

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-19013
https://packetstormsecurity.com/files/155426/Pagekit-CMS-1.0.17-Cross-Site-Request-Forgery.html
https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/commit/fdf885ccf7c57c69f4d256bbb3ec76a927267a2b
https://github.com/advisories/GHSA-692x-89xv-64jx